The digests connect a username to the associated email address and contain suggested posts from select popular and safe-for-work subreddits users subscribed to. The logs contain the digest emails themselves.
O What was accessed: Logs containing the email digests sent between June 3 and June 17, 2018. Email digests sent by Reddit in June 2018.Reddit is advising users to check their private messages and/or email inbox. Users that signed up for Reddit after 2007 are safe. O How to tell if your information was included: Reddit has messaged affected users and is resetting passwords on accounts where the credentials might still be valid. In Reddit's first years it had fewer features, so the most significant data contained in this backup are account credentials (username + salted hashed passwords), email addresses, and all content (mostly public, but also private messages) from the abovementioned timeframe. O What was accessed: A complete copy of an old database backup containing very early Reddit user data from the site's launch in 2005 through May 2007. All Reddit data from 2007 and before including account credentials and email addresses.Two key areas of user data were accessed: They were not able to alter Reddit information, and it has since taken steps to further lock down and rotate all production secrets and API keys, and to enhance logging and monitoring systems. Reddit acknowledged that although it was a serious attack, the attacker did not gain write access to Reddit systems they gained read-only access to systems that contained backup data, source code and other logs. Its primary access points for code and infrastructure had required two-factor authentication (2FA) via SMS-based authentication, and the main attack was via SMS intercept. On June 19, Reddit learned that between June 14 and June 18, an attacker compromised a few employee accounts with its cloud and source code hosting providers. Reddit has since been conducting a painstaking investigation to figure out just what was accessed and to improve its systems and processes to prevent the incident from happening again. Reddit has announced that a hacker broke into a few of its systems and managed to access some user data, including some current email addresses and a 2007 database backup containing old salted and hashed passwords.
0 kommentar(er)
